Privacy Policy

The website and app are for clinic staff, such as reception, nurses, doctors, pharmacy, lab, and administrators. Patients do not create their own MedERP accounts. A clinic may store a patient's details, including a child's details, as part of that patient's care.

• Account details: name, mobile number, email, username, role, and password.
• Clinic details: clinic name, address, phone number, billing contact, and subscription choices.
• Patient and clinical records the clinic enters: identity and contact details, appointments, queue tokens, vitals, diagnoses, prescriptions, investigations, certificates, ward stays, and related notes.
• Bills, payments recorded by the clinic, pharmacy stock, and lab records.
• Files a staff member chooses to upload, such as a report, and bills they choose to save.
• Help requests, including the mobile number used to receive a one-time code.

• A sign-in session stored in a first-party cookie named mederp_session.
• The mobile number last used on the sign-in screen, saved on that device so it can be filled in again.
• A push-notification token and the notification title and message, when notifications are turned on. Delivery uses Firebase Cloud Messaging.
• Basic connection data needed to operate the service, such as the time of a request.

Neither app shows ads or includes a third-party analytics tracker. The Android app does not ask for location, contacts, microphone, or camera. The iOS permissions are listed in the iOS app section below.

• To sign staff in and show each person only the clinic workspace their role allows.
• To run OPD, nursing, doctor consults, billing, pharmacy, lab, and certificates.
• To send staff alerts about work in the clinic.
• To collect the clinic's MedERP subscription through Razorpay.
• To send a WhatsApp message or bill when the clinic chooses to send one.
• To answer a help request and keep the service secure and reliable.

MedERP does not sell personal information.

• Staff at the same clinic, limited by the role the clinic assigns.
• Razorpay, to process the clinic's subscription. MedERP stores payment reference IDs, not full card numbers.
• WhatsApp (Meta), when the clinic sends a WhatsApp message or document to a mobile number.
• Google Firebase, to deliver push notifications to the app.
• The infrastructure provider that hosts MedERP.
• A regulator, court, or other party when the law requires it.

Clinical records in MedERP are health information. They are used so the clinic can care for patients and run its operations. They are not used for advertising. The clinic is responsible for the accuracy of the records it enters and for giving its patients any notice the law requires.

The Android app opens the MedERP website and uses these device permissions:

• Internet, to load the clinic workspace.
• Notifications and vibration, for staff alerts.
• Files the user picks, to upload a document or to save a bill PDF where the user chooses.

The iOS app opens the MedERP website and uses these device permissions:

• Internet, to load the clinic workspace.
• Notifications, for staff alerts.
• Camera, when staff choose to take a photo for a patient record, signature, or document upload.
• Photo library, when staff choose an existing photo or document to attach.
• Location, only while the app is open and only when a hospital page requests it.
• Files the user picks, to upload a document or to save a bill PDF where the user chooses.

The iOS app does not ask for contacts or the microphone.

Clinic and patient records stay in the clinic's workspace while that clinic uses MedERP, and longer when a medical, billing, tax, or legal duty requires it. Sign-in sessions end when the staff member signs out or the session expires. A notification token is kept while that device is registered for alerts.

Staff can sign out, turn off notifications in the phone settings, and choose not to upload or save a file. Patient-record corrections and access requests are handled by the clinic that entered the record. To close a clinic subscription or ask a question about this policy, use the Help page.

If this policy changes, the updated version will be posted on this page with a new date. Continued use of MedERP after the update means the clinic and its staff are using the service under the revised policy.